← All credits
tdjackey
102 vulnerability records and advisories credit this contributor.
CVE-2026-31993
OpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell Chains
CVE-2026-31992
OpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -S
CVE-2026-31991
OpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Leakage in Signal Group Allowlist
CVE-2026-31990
OpenClaw < 2026.3.2 - Symlink Traversal in stageSandboxMedia Destination
CVE-2026-31989
OpenClaw < 2026.3.1 - Server-Side Request Forgery via web_search Citation Redirect
CVE-2026-29608
OpenClaw 2026.3.1 < 2026.3.2 - Approval Integrity Bypass via system.run argv Rewriting
CVE-2026-29607
OpenClaw < 2026.2.22 - Authorization Bypass via allow-always Wrapper Persistence
CVE-2026-28460
OpenClaw < 2026.2.22 - Allowlist Bypass via Shell Line-Continuation Command Substitution in system.run
CVE-2026-27670
OpenClaw < 2026.3.2 - Arbitrary File Write via ZIP Extraction Parent Symlink Race Condition
CVE-2026-27566
OpenClaw < 2026.2.22 - Allowlist Bypass via Wrapper Binary Unwrapping in system.run